712-50 · Question #247
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new…
The correct answer is C. IT security centric agenda. From an Information Security Leadership perspective, the major concern in this scenario is that the CISO is focusing too narrowly on IT security, rather than taking a broader enterprise-wide risk-based approach that aligns with business objectives. While the CISO has skills and…
Question
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda. From an Information Security Leadership perspective, which of the following is a MAJOR concern about the CISO's approach to security?
Options
- ALack of risk management process
- BLack of sponsorship from executive management
- CIT security centric agenda
- DCompliance centric agenda
How the community answered
(33 responses)- A15% (5)
- B6% (2)
- C73% (24)
- D6% (2)
Explanation
From an Information Security Leadership perspective, the major concern in this scenario is that the CISO is focusing too narrowly on IT security, rather than taking a broader enterprise-wide risk-based approach that aligns with business objectives. While the CISO has skills and experience, being constantly on the defensive and unable to advance the agenda suggests a limited, technical-centric approach that doesn't resonate with executive leadership or business units.
Topics
Community Discussion
No community discussion yet for this question.